Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0DCA7123D8311ED8DB244B8F1222468.roa
File:                     A0DCA7123D8311ED8DB244B8F1222468.roa (raw, json)
Hash identifier:          /QBUG2JrvgGmyyUS390+m0e9wGzE/sGqR8QRiJBcnm4=
Subject key identifier:   79:94:C5:67:AD:AF:02:41:F2:0B:94:DF:55:79:E5:51:C8:09:AB:6C
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       08A1
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0DCA7123D8311ED8DB244B8F1222468.roa
Signing time:             Mon 26 Sep 2022 10:11:47 +0000
ROA not before:           Mon 26 Sep 2022 10:11:43 +0000
ROA not after:            Tue 26 Sep 2023 10:11:43 +0000
asID:                     203999
IP address blocks:        161.123.242.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Sep 26 10:11:43 2022 GMT
            Not After : Sep 26 10:11:43 2023 GMT
        Subject: CN=63317ae3-f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b6:bf:96:59:fd:81:f6:6b:1d:36:b9:7f:ee:
                    bc:ef:68:e7:73:e4:59:f4:3b:04:07:c2:78:80:d3:
                    d5:62:20:84:8d:ab:5b:ea:e2:a0:2c:3c:06:bb:32:
                    48:55:3f:50:45:d1:a5:8b:ac:32:1f:0f:5e:00:53:
                    f2:e6:c7:c5:d0:e7:e2:31:ad:2e:4d:61:d9:83:3c:
                    33:d7:12:a2:53:e8:31:b2:d6:30:f1:00:65:7b:d2:
                    4a:39:5c:0f:30:36:50:22:12:02:51:df:5b:18:3a:
                    79:63:d0:10:ff:3d:c4:92:76:ab:51:bc:9a:94:ae:
                    60:92:ee:bd:36:b8:f2:5d:9b:bb:74:ab:f4:22:b3:
                    e2:b0:02:20:7c:7b:75:f6:54:b0:7b:5d:92:e6:e7:
                    e6:90:13:41:91:0e:d3:cf:34:2c:50:70:f4:40:c1:
                    09:c7:ca:6f:8d:36:12:42:14:18:b9:7f:70:6f:e4:
                    dd:dd:fa:b3:c7:04:f8:99:30:02:00:13:95:27:24:
                    22:bd:8e:e1:2f:d3:94:af:59:fd:3a:cf:38:8b:48:
                    0d:63:4c:44:00:d4:b5:75:0c:71:39:a7:02:fb:31:
                    42:57:03:ae:66:98:bf:bf:25:9b:be:d8:d4:16:77:
                    74:46:d0:af:c2:c4:6a:84:96:b5:5b:70:e4:9a:fd:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:C5:67:AD:AF:02:41:F2:0B:94:DF:55:79:E5:51:C8:09:AB:6C
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/A0DCA7123D8311ED8DB244B8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:72:dd:91:eb:b6:f2:ba:09:5c:7d:03:31:02:26:12:4f:2c:
         e0:54:c2:19:f2:a2:10:b9:e0:92:48:d6:86:ff:01:24:3b:e9:
         e5:dc:d0:23:b6:c6:fb:b3:39:0d:10:83:f2:cd:a7:12:96:4e:
         94:bc:94:bc:e0:61:07:68:d0:6e:2b:ca:25:a8:d0:e4:b2:ce:
         65:56:41:b2:3a:2f:3a:9e:14:95:3b:eb:6a:df:e4:81:f4:b4:
         0d:a9:6b:13:c8:71:f7:d9:e7:7b:a7:e1:d8:15:06:3c:ee:d2:
         7a:11:7a:96:f2:fe:2d:12:ce:73:52:b3:74:85:f7:8a:b5:cc:
         c0:85:05:50:b3:5e:f3:68:0d:2a:99:5f:28:54:4f:66:c1:9c:
         3f:d6:95:2a:68:e1:9d:b7:1c:f6:5f:d0:f7:85:65:30:b8:26:
         35:28:4c:59:93:33:0b:58:40:19:fd:9f:80:eb:0e:1e:6f:d0:
         72:9c:e9:7c:26:24:b3:a8:94:45:c3:52:03:c6:26:2e:b7:02:
         90:9e:a8:de:4a:a8:aa:fe:86:2f:5b:25:a7:ff:4b:1d:65:04:
         0f:d1:5e:2a:70:99:a3:f9:8e:f3:d9:e6:d3:6e:df:6a:ad:7a:
         ac:11:88:15:7f:30:2d:e6:ee:07:b6:d5:d7:51:96:fc:f8:4d:
         b3:fb:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----